Processing of personal data of users of the Apcoa Flow application
Please read carefully and thoroughly this document, which applies to data processed in the Apcoa Flow application. Information on the Apcoa Flow application is available at https://www.apcoa.pl/apcoa-flow and in the Apcoa Flow application regulations available during the installation of the Apcoa Flow application on a mobile device.
The administrator of your personal data is APCOA Polska Sp. z o.o. (former name APCOA Parking Polska Sp. z o.o.) with registered office in Warsaw, Rondo ONZ 1, registered in the National Court Register under number 0000129400 (Apcoa).
It is not necessary for the user to provide personal data in order to install the Apcoa Flow application. However, starting to use Apcoa Flow application requires the creation of a user account. In connection with the creation of a user account, the Administrator processes the following personal data:
- name of the user,
- e-mail address.
Provision of this data is voluntary, but failure to provide it will prevent the creation of a user account.
In connection with the use of the Apcoa Flow application, the Administrator also collects data:
- concerning the geolocation of the user; consent to geolocation is necessary for the use of the Apcoa Flow application;
- data on historical parking locations, including vehicle registration number, payment or credit card number;
- telephone number, the provision of which is voluntary and not required for the use of the Apcoa Flow app.
We collect, process and store personal data of the user of the Apcoa Flow app exclusively:
- in order to create a user account for the Apcoa Flow app and to use the Apcoa Flow app in accordance with its purpose, including in particular the location of available parking spaces, the possibility of making an electronic payment;
- for the purpose of concluding and performing a parking space lease agreement, if personal data is provided for the performance of the agreement, including for accounting purposes (including invoicing), internal and external debt collection, and the processing of complaints;
- in other cases in which the processing of data takes place on the basis of the consent of the data subject - to the extent and for the purpose resulting from the content of the consent granted;
- for the legally justified purposes of the data controller, i.e. in particular direct marketing of products and services and customer satisfaction surveys.
Your personal data will not be transferred to third parties unless this is necessary for the provision of the service or the performance of the contract. However, personal data will be transferred to the entity administering the Apcoa Flow application system and the entity providing maintenance and development services for this system. Data in such a case may be transferred outside the EEA, but only to such entities that provide adequate safeguards and enforceable rights of data subjects, as well as effective legal remedies, as set out in the concluded contract in accordance with the standard contractual clauses.
Personal data may also be transferred to third parties for the purposes of external debt collection or enforcement of claims, as well as to suppliers responsible for the operation of IT systems, entities providing accounting services, marketing agencies (within the scope of marketing services) and entities related to the Administrator, including companies in its capital group. The user data of the Apcoa Flow application will also be transferred to public authorities and bodies entitled to access them and within the framework of the Administrator's legal obligation to disclose them or its obligation to disclose them by virtue of a court ruling.
The Administrator's employees and subcontractors are obliged to maintain confidentiality and comply with data protection regulations, and access to the data is granted only to persons with appropriate authorisations or concluded agreements for the entrustment of the processing of personal data.
User rights of the Apcoa Flow application
The user may, free of charge, at any time and without giving any reason, obtain information about the processing of his/her personal data and exercise his/her right to access, request rectification, completion and amendment of the data processed by us about him/her. The user may, at any time, request the erasure of any data stored about him/her (right to be forgotten) and request the restriction of data processing. These rights will be exercised by the Administrator without delay when the fulfilment of the requests is permitted by law.
Each User also has the right to data portability and the right to object to the processing of his or her data for Apcoa's legitimate purposes as Controller, including direct marketing of its products and services and profiling, and the right not to be subject to a decision that is based solely on automated processing.
You may also withdraw your consent to the processing and use of data about you at any time and without giving any reason, if the data was processed on the basis of your consent. Consent may not be withdrawn if:
- the data subject does not sufficiently identify himself/herself,
- a legal provision allows the data to be processed despite the withdrawn consent.
Withdrawal of consent for data processing in connection with the use of the Apcoa Flow application involves deletion of the user's account and cessation of the use of the Apcoa Flow application. Withdrawal of consent for data processing does not affect the possibility of concluding parking space rental agreements outside the Apcoa Flow application.
We also stipulate that:
- the data subject has the right of access at any time to his or her data directly collected in the Apcoa Flow application and the right to be informed about the data, but this right may be actively exercised no more than once every 6 months;
- the person has the right to request the erasure of his/her personal data, in particular when the data is no longer necessary for the purposes for which it was collected. However, this request will not be fulfilled when the processing is necessary for:
- to exercise the rights and freedoms of expression and information,
- to comply with a legal obligation to process under Union or Polish law, or to perform a task carried out in the public interest, in particular the Accountancy Act,
- for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes,
- for the establishment, assertion or defence of claims.
Please note that the rules on data protection and data processing, including those of third parties, in particular software providers for the mobile device on which the Apcoa Flow application is installed, may be subject to constant change. Therefore, it is advisable and necessary to familiarise oneself with changes in the law and the rules adopted by the various companies, which is the responsibility of the data subject. The controller will only inform users of the Apcoa Flow application if the Apcoa Flow application's data protection rules change .
The storage period of personal data in the Apcoa Flow application depends on the data being processed, and so:
- data concerning the data necessary for the creation and maintenance of the user account of the Apcoa Flow application - until the user does not delete the user account in the Apcoa Flow application,
- data concerning concluded parking space lease agreements, including data necessary for debt collection - until the time of establishing, asserting or defending claims, however, no longer than the period of limitation provided for by law,
- data processed on the basis of consent - until its withdrawal,
- other data - not longer than 2 years.
Final information
If it is determined that the Administrator is processing personal data in violation of the law, data subjects have the right to lodge a complaint to the President of the Office for Personal Data Protection with its seat in Warsaw, Stawki 2 Street.
In order to ensure the highest level of security in the processing of personal data, Apcoa has appointed a Personal Data Protection Officer, whom you can contact at daneosobowe@apcoa.pl, or alternatively in writing to Apcoa.